POC_CVE-2025-14700

CVE-2025-14700 PoC for CVE-2025-14700 , a Server-Side Template Injection SSTI vulnerability in Crafty Controller = 4.6.1. This vulnerability allows authenticated users to achieve Remote Code Execution RCE by injecting malicious Jinja2 templates into the Webhook configuration. 📦 Installation...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Explotación de Vulnerabilidad de Ejecución Remota de Código CVE-2024-7954 Proyecto de Pruebas de Vulnerabilidad de Software Presentado por: Shivansh Kuntal Resumen Este proyecto demuestra la explotación de CVE-2024-7954 , una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a...

CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

EUVD-2026-81335

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87796

The Multi Uploader for Gravity Forms WordPress plugin is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 1.1.9 . The flaw resides in the move_file function in GFMU_FileUploader.php, where insufficient file type validation during chunked upload handling allo...

CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87935 Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

EUVD-2026-81334

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

CVE-2026-87935 Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

CVE-2026-87935

The Paid Downloads WordPress plugin (versions ≤ 3.15) is vulnerable to an unauthenticated arbitrary file upload via the paiddownloads_update_file action. The root cause is missing authorization and file type validation in the admin_request_handler function, which is reachable without authenticati...

google-chrome-emergency-update

Actualización de Seguridad de Emergencia de Chrome Este repositorio contiene información y herramientas relacionadas con la actualización de emergencia de Chrome de Google que aborda vulnerabilidades críticas de seguridad. 🚨 Aviso de Actualización de Emergencia Google ha emitido una actualización...

Penetration-Testing-Walkthrough-Hacksudo-Thor

HackSudo Thor Full Penetration Testing Walkthrough Target: HackSudo Thor from VulnHub Objective: Gain root access and read /root/proof.txt Environment: Isolated VirtualBox lab segmented by a pfSense firewall Table of Contents Overview Network Topology Attack Chain Summary Phase 1: Passive...

opac-fast-automation

CVE-2025-65862 — Documentation, Analysis, and Automation Tool Research Purposes Only ⚠️ Ethical & Legal Warning All materials in this repository are provided solely for: security research, learning, vulnerability analysis, and testing in environments you own or have explicit permission to test...

fil-c v0.685

Fil-C 0.684 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

CVE-2025-55182

CVE-2025-55182 React2Shell PoC Environment Warning : This project is intended for security research and educational purposes only. Using it on someone else's system without permission is illegal. Vulnerability Overview Item| Content ---|--- CVE ID| CVE-2025-55182 Alias| React2Shell CVSS Score| 10...

Log4Shell-Vulnerability-Replication

CVE-2021-44228 Log4Shell Vulnerability Complete Replication Record This record is based on the Apache Solr 8.11.0 target environment provided by Vulhub, fully replicating the Log4j2 JNDI injection vulnerability, and successfully verifying the vulnerability's existence through DNSLog and local LDA...

CVE-2026-9490

CVE ID: CVE-2026-9490 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19668 1. Executive Summary A critical security vulnerability has been identified in the Acer Care Center service ACCSvc.exe. The vulnerability allows any authenticated local user to...

CVE-2026-23479-Redis-UAF-Proof-of-Concept

🔥 CVE-2026-23479 – Redis UAF Proof of Concept Use-After-Free in RedisunblockClientOnKey leading to Remote Code Execution Proof of concept with GDB‑assisted exploitation educational / lab use only 📖 Overview CVE-2026-23479 is a critical Use‑After‑Free UAF vulnerability in Redis versions 7.2.0...

blackbox-pentesting-infsecos

Black-Box Penetration Test — SecOS:1 VulnHub Overview Full black-box penetration test against SecOS:1 , a deliberately vulnerable CTF machine from VulnHub. Objective: simulate a real-world attacker with zero prior knowledge and achieve root-level compromise, evidenced by retrieving /root/flag.txt...

HackTheBox-Facts

HTB Facts — Guía completa Dificultad: Media SO: Linux Etiquetas: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Escalada de Privilegios Tabla de Contenidos 1. Reconocimiento 2. Enumeración Web — Puerto 80 3. Descubrimiento de MinIO — Puerto 54321 4. Camaleon CMS — Acceso de Administrador 5...